Behavioral task
behavioral1
Sample
19abf6cb6f32d82681da9d31d38d71d5_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
19abf6cb6f32d82681da9d31d38d71d5_JaffaCakes118
-
Size
784KB
-
MD5
19abf6cb6f32d82681da9d31d38d71d5
-
SHA1
5ccfd242a65e6a6695e6ca9032c9aa396022b6d2
-
SHA256
e87e435835b256ff2a760e5b0031adf9ee153e35f22db8dfd1363cd4817c1137
-
SHA512
c8c1d2813d7b57d8479b130bd08de51cf6cc48efe10e0f57058d884d9453463e82ae6592b0820f6ccb48198578acae069558ddd632938ee0fd4e8ef33743ce82
-
SSDEEP
12288:ulJnLR6Fl8yEaTFuS9olmRClZ3KFyD1Isl7lDG5Xg9yq37N22jmbFSHpKhlY:ulJLR6cylTgS9SmRGcFcpc5QXpts/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19abf6cb6f32d82681da9d31d38d71d5_JaffaCakes118
Files
-
19abf6cb6f32d82681da9d31d38d71d5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE